Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier: ZpLnnhPpqAM/XFXaY2lkCkFq/vqJbcb+lcbb2UAxiOI=
Subject key identifier: C3:43:BD:33:24:F8:49:A8:3B:C0:13:6B:FF:EC:C4:59:9B:9A:49:5D
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 019A5074E53E5DBE1F47A963BF9CA31A5313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 20:00:29 +0000
Manifest this update: Tue 04 Nov 2025 20:00:29 +0000
Manifest next update: Wed 05 Nov 2025 20:00:29 +0000
Files and hashes: 1: 2FnxWjtwh7KFv_hykkrSOYGbvY4.roa (hash: lHqB/84b/tnNxb+0w+5WU9XioMN+I/3MvGDQZ2GLdEw=)
2: ajuoeFVs3Wv6piEKCQm-YDbacGU.roa (hash: uiCyFTO1It1gDM/Wfhrrlyxb4WrD3apKehfP5R4U3W0=)
3: bMNPQ0JvZwzx-pZYER1G_knAfSg.roa (hash: W+fVC2UnLIyGTc4qX8q7TadCkeRxz6sUHiIjTmi3R8k=)
4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: nzmV8diVSx1t7LzMf6s13EXBCKSpJprxI145RXeWs/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:e5:3e:5d:be:1f:47:a9:63:bf:9c:a3:1a:53:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Nov 4 20:00:29 2025 GMT
Not After : Nov 5 20:00:29 2025 GMT
Subject: CN=c343bd3324f849a83bc0136bffecc4599b9a495d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:01:14:c8:20:c6:af:74:14:94:34:d8:38:
c4:9f:74:ab:7e:18:f6:26:a8:f3:72:ba:9a:e5:9b:
96:46:af:dc:30:93:b9:47:9f:13:33:2e:b4:87:bd:
30:ac:30:2a:34:ef:9f:ae:75:e2:6d:fb:c5:80:11:
86:46:f1:e4:2b:7a:e5:8f:cf:a9:13:d2:36:e4:82:
9d:83:a1:82:0d:f8:40:1b:5b:05:1d:50:df:10:8b:
45:2e:bd:b1:ae:bc:66:d6:7f:e0:79:9f:25:90:de:
86:44:2c:f7:09:79:e5:2a:1d:d0:15:03:0b:34:76:
0b:a3:cd:04:d5:c9:e2:9b:8b:15:b8:82:0c:ed:24:
3f:8f:73:92:e6:1c:b2:02:a5:79:03:dd:56:65:27:
30:65:c6:31:5c:00:8e:fc:fc:bd:54:51:2f:12:52:
e3:4a:ac:5c:e5:15:ca:e4:cd:55:2d:05:94:15:82:
24:1b:2f:0b:3f:27:06:68:ae:8f:18:a3:10:5f:96:
a8:41:10:c5:8c:1f:0f:39:4a:c7:80:2a:dc:4f:d5:
30:56:1e:80:2c:01:b5:2d:d1:da:33:87:d8:80:d9:
1e:26:f0:3c:c0:a0:16:75:97:ba:d1:1c:f1:d2:71:
74:d3:2e:4d:bc:32:97:e8:3f:65:13:b9:db:d0:36:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:43:BD:33:24:F8:49:A8:3B:C0:13:6B:FF:EC:C4:59:9B:9A:49:5D
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2b:c0:69:4a:8e:ac:a6:79:33:d2:be:a6:51:ef:fa:dd:a6:
16:f2:56:80:b6:3b:28:70:12:99:9c:32:81:ba:70:8b:ea:08:
e3:ac:89:8e:35:f2:6c:35:f6:c0:54:a8:d6:9e:5c:80:58:84:
96:df:05:53:b1:3c:26:b4:6b:6f:55:6e:d1:c9:72:79:c3:0f:
e7:c0:c8:6e:dc:a5:78:07:a8:49:67:10:f1:85:d5:7e:84:c8:
2c:50:a0:39:21:9f:bf:f1:f7:85:50:73:af:6e:99:f3:3d:69:
24:59:9c:63:7e:53:eb:c4:a2:f2:1e:36:25:21:4c:0d:5c:5b:
85:fa:b9:aa:cd:33:dd:59:32:47:55:d6:bb:c3:a3:7a:ae:1a:
b4:88:02:30:b3:a6:94:db:e6:b9:82:b6:b0:ca:a0:03:76:18:
1c:eb:d8:50:c2:0b:67:1f:62:fb:34:5a:a4:a6:8a:80:cc:61:
f1:7b:1e:0a:c1:32:fc:91:e6:7d:43:9f:9d:ff:49:ad:a3:9e:
5b:3b:a9:82:e4:15:86:aa:b0:3b:31:7f:7a:ab:cd:92:ff:ca:
16:9c:88:d6:2e:3b:e2:40:61:ef:71:82:1c:d0:10:96:98:66:
b3:f9:77:e7:66:e2:c1:e5:47:8c:af:d7:49:26:ee:1a:dc:21:
72:af:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:05:08 2025 by rpki-client